Login or Register to Ask a Question and Join Our Community


Cybersecurity

sudo /bin/sh or sudo su -

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity sudo /bin/sh or sudo su -
# 1  
Old 07-19-2010
sudo /bin/sh or sudo su -
we are looking at changing the way we get root on our network.

in our current system if an admin needs root access he just gets the root password and uses an su.

some of our staff have decided that a sudo to "/bin/sh" will be easer.
some of our staff think a sudo to "su -" will be better.
I feel that we should stick with root passwords.



what are the thoughts out there?






some background on our network that maybe of interest.
* we have a team of 9 unix admins who use root quite a lot.
* we have about 600 servers, solaris and HPUX.
* root passwords are kept in a password vault system that needs the user password to access.
* root passwords are changed every 6 months.
* our version of sudo is NOT standard, it can't be setup to let user sudo any command, it has to be setup for each and every command.
* auditing is not a big issue for us.
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Red Hat

Sudo to user other than root but do not allow sudo to root

I have a set of RHEL 5 boxes running our ERP software on Oracle databases. I need to allow my DBA's to su to oracle and one other account (banner) without knowing the oracle or banner password. But I need to prevent them from su'ing to any other user especially root. I only want them to be able to... (1 Reply)
Discussion started by: westmoreland
1 Replies

2. Shell Programming and Scripting

sudo: sorry, you must have a tty to run sudo

Hi, Have a need to run the below command as a "karuser" from a java class which will is running as "root" user. When we are trying to run the below command from java code getting the below error. Command: sudo -u karuser -s /bin/bash /bank/karunix/bin/build_cycles.sh Error: sudo: sorry,... (8 Replies)
Discussion started by: Satyak
8 Replies

3. Shell Programming and Scripting

sudo: sorry, you must have a tty to run sudo

Hi All, I running a unix command using sudo option inside shell script. Its working well. But in crontab the same command is not working and its throwing "sudo: sorry, you must have a tty to run sudo". I do not have root permission to add or change settings for my userid. I can not even ask... (9 Replies)
Discussion started by: Apple1221
9 Replies

4. Shell Programming and Scripting

ssh foo.com sudo command - Prompts for sudo password as visible text. Help?

I am writing a BASH script to update a webserver and then restart Apache. It looks basically like this: #!/bin/bash rsync /path/on/local/machine/ foo.com:path/on/remote/machine/ ssh foo.com sudo /etc/init.d/apache2 reloadrsync and ssh don't prompt for a password, because I have DSA encryption... (9 Replies)
Discussion started by: fluoborate
9 Replies

5. AIX

sudo log and sudo auditing

Sudo In AIX, how to find out what commands have been run after a user sudo to another user? for example, user sam run 'sudo -u robert ksh' then run some commands, how can I (as root) find what commands have been run? sudo.log only contains sudo event, no activity logging. (3 Replies)
Discussion started by: jalite19
3 Replies

6. Shell Programming and Scripting

sudo and sudo sh

Hello, I'm TOTALLY NEW to Unix. I just want to ask about what do those two commands in a SIMPLE NON-FORMAL mean: sudo sudo sh Thanks. (1 Reply)
Discussion started by: SWEngineer
1 Replies

7. UNIX for Dummies Questions & Answers

Unable to use the Sudo command. "0509-130 Symbol resolution failed for sudo because:"

Hi! I'm very new to unix, so please keep that in mind with the level of language used if you choose to help :D Thanks! When attempting to use sudo on and AIX machine with oslevel 5.1.0.0, I get the following error: exec(): 0509-036 Cannot load program sudo because of the following errors:... (1 Reply)
Discussion started by: Chloe123
1 Replies

8. UNIX for Dummies Questions & Answers

Problems with Alias, /bin/sh and sudo

'exec /bin/sh' breaks alias -------------------------------------------------------------------------------- I have an application that requires su to root in order to run some commands. Unfortunately, my corporate policy only allows sudo so I created an alias in .profile as "alias su="su... (0 Replies)
Discussion started by: stulincoln
0 Replies

9. UNIX for Dummies Questions & Answers

sudo and su -

Hello The sudo is a "su" or "su -"? (i.e. it takes the user's profile also?) or is it me who define this? thanks (1 Reply)
Discussion started by: melanie_pfefer
1 Replies
Login or Register to Ask a Question

LEARN ABOUT OPENSOLARIS

gksu

GKSU(1) 						      General Commands Manual							   GKSU(1)

NAME

       gksu - a Gtk+ su frontend

SYNOPSIS

       gksu [ options ] <command>
       gksudo [ options ] <command>

DESCRIPTION

       This manual page documents briefly gksu and gksudo

       gksu  is  a frontend to su and gksudo is a frontend to sudo.  Their primary purpose is to run graphical commands that need root without the
       need to run an X terminal emulator and using su directly.

OPTIONS

       These programs follow the usual GNU command line syntax, with long options starting with  two  dashes  (`-').   A  summary  of  options	is
       included below.

   Common Options:
       --user <user>, -u <user>

	      Calls <command> as the specified user

       --message <message>, -m <message>

	      Replaces the standard message shown to ask for password for the argument passed to the option

       --sudo-mode, -S

	      Use  sudo  instead  of  su as backend authentication system. Notice that the X authorization magic will not work when using sudo for
	      target users other than root.

       --title <title>, -t <title>

	      Replaces the default title with the argument

       --icon <icon>, -i <icon>

	      Replaces the default window icon with the argument

       --print-pass, -p

	      Asks gksu to print the password to stdout, just like ssh-askpass. Useful to use in scripts with programs that accept  receiving  the
	      password on stdin.

       --disable-grab, -g

	      Disables the "locking" of the keyboard, mouse, and focus done by the program when asking for password

       --ssh-fwd, -s

	      Strip the host part of the $DISPLAY variable, so that GKSu will work on SSH X11 Forwarding.

       --login, -l

	      Makes  this a login shell. Beware this may cause problems with the Xauthority magic. Run xhost to allow the target user to open win-
	      dows on your display! This is ignored if running with sudo as backend for authentication.

       --preserve-env, -k

	      Preserve the current environments, does not set $HOME nor $PATH, for example.

FILES

       /etc/gksu.conf
	      Configuration file to setup system-wide defaults for gksu/gksudo.  It provides an option to force the display grabing, also.

RETURN VALUE

       On success, gksu will return 0. If an authentication error ocurred, it will exit with error code 3. If the  user  canceled  the	dialog	or
       closed the window, it will return error code 2. On other error conditions, gksu will return 1.

NOTE

       Note that <command> and all its arguments should be passed as one single argument to gksu just like one would to when using su.

SEE ALSO

       su(1), gksuexec(1).

AUTHOR

       This manual page was written by Gustavo Noronha Silva <kov@debian.org> for the Debian GNU/Linux system (but may be used by others).

								       2003								   GKSU(1)